Mysterious Clock Changes

  • Thread starter Thread starter David Kraemer
  • Start date Start date
D

David Kraemer

I have a customer with XP Pro on an Emachine box. He is
running a somewhat recent Novell client. The clock is
changing on this puppy after the login. The event viewer
makes note that the winlogin service changes the clock
twice but each time it is a difference of only a second.
The clock is mysteriously changing in the OS and the BIOS
AFTER login by 11 hours when in AZT but it only changes 2
hours when in GMT. If you shutdown at the login screen the
BIOS will remain unaffected. But after login the time
changes without there being a proper note made in the
event viewer. McAfee comes up clean. The client is not set
up to sync time over the Internet and the time change does
not match the Netware 5.0 server time. I have looked at
all of the services running and have cleaned out as many
as possible. There are no suspicious services running as
this occurs. McAfee archives on the Web aren't much help
either. Looks like a prankster virus or possibly another
Novell wierdism. I don't mind. I get paid by the hour. But
since this is virus like behavior it is of great concern
to my customer. Anyone have any ideas? This one is fun!
 
It may well be Novell and the server is changing the time.
Many servers will at login.
How is the time zone set and is that changed by login.
I know of no virus that messes with the time and nothing
more noticeable.
 
-----Original Message-----
I have a customer with XP Pro on an Emachine box. He is
running a somewhat recent Novell client. The clock is
changing on this puppy after the login. The event viewer
makes note that the winlogin service changes the clock
twice but each time it is a difference of only a second.
The clock is mysteriously changing in the OS and the BIOS
AFTER login by 11 hours when in AZT but it only changes 2
hours when in GMT. If you shutdown at the login screen the
BIOS will remain unaffected. But after login the time
changes without there being a proper note made in the
event viewer. McAfee comes up clean. The client is not set
up to sync time over the Internet and the time change does
not match the Netware 5.0 server time. I have looked at
all of the services running and have cleaned out as many
as possible. There are no suspicious services running as
this occurs. McAfee archives on the Web aren't much help
either. Looks like a prankster virus or possibly another
Novell wierdism. I don't mind. I get paid by the hour. But
since this is virus like behavior it is of great concern
to my customer. Anyone have any ideas? This one is fun!
.
Download ClockSync at WhenU.com, you'll never have to
Click to expand...
reset your clock again and it is FREE and very small.
Go here: http://www.whenu.com/products.html
 
Back
Top